This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft File: Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft (raw, json) Hash identifier: s905g6CLeyCodmea/k1DW29d4N6kHjdcYg8DhQ7QxsY= Subject key identifier: B2:D3:E7:D3:14:3D:64:12:04:99:E8:1F:CB:E8:8B:8E:66:C0:6B:EE Authority key identifier: 66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B Certificate issuer: /CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b Certificate serial: 019B2BF8D4AB0A22B4AB12B67F0BEB514B8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft Manifest number: 0973 Signing time: Wed 17 Dec 2025 11:01:26 +0000 Manifest this update: Wed 17 Dec 2025 11:01:26 +0000 Manifest next update: Thu 18 Dec 2025 11:01:26 +0000 Files and hashes: 1: HJqh9LPhNU96BEOoiCFDiOzAQPY.roa (hash: Kn8EOpw3bBi0iQXW8fO4Sjg58AKy7QrqKxqXj68ts98=) 2: X5N0k5_edi7TUbUxF9SeBJzV_dk.roa (hash: gP57pvGIpr/XNDn/RWR3jdseR7kJZgIx0hgFuiONUXA=) 3: Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl (hash: mJZsZKO68DGKoAY4Rp0jeqOzOpVesu9URWGjxPq6pJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:d4:ab:0a:22:b4:ab:12:b6:7f:0b:eb:51:4b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dfc89c07ae1331bfb37138568ea79a87fecf3b Validity Not Before: Dec 17 11:01:26 2025 GMT Not After : Dec 18 11:01:26 2025 GMT Subject: CN=b2d3e7d3143d64120499e81fcbe88b8e66c06bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:99:d8:fe:76:5e:4b:f3:f1:df:d8:b3:fd:61: c6:2d:8f:71:ef:0e:a7:04:e2:b2:4e:40:d0:89:6e: 0d:77:90:25:5f:78:f0:d5:94:7b:45:0c:cc:c9:a7: 2e:6d:d8:ee:42:23:67:31:f3:d3:bc:05:14:5d:3c: ad:67:e5:64:c9:5d:7f:4c:c3:86:23:7e:10:be:5d: d6:39:36:c7:57:f4:11:45:9b:fe:b1:a2:1b:ca:4f: 82:b2:42:f3:19:81:11:23:1f:6b:67:b1:ac:f8:2a: e1:64:cd:f1:33:2e:aa:18:30:41:a4:c4:13:46:99: 73:54:97:c8:34:06:ea:ed:a0:69:04:44:3e:b4:07: 55:22:b5:15:c7:1f:7a:f4:b7:49:ce:f7:97:71:dd: 4b:ca:af:3e:8b:98:1f:92:61:2e:5b:e4:96:e1:76: bf:5d:8a:ae:f2:91:bd:50:18:c9:a2:e3:75:df:77: 2a:55:7e:55:58:91:4e:6b:ad:4f:90:6b:98:2b:91: 7c:53:c8:12:64:0d:36:27:66:5a:95:14:2a:04:a7: 77:7f:23:33:e9:26:f7:1b:0f:4b:10:61:29:87:4a: 19:95:dd:af:cd:07:dc:13:19:29:ea:af:a7:53:c0: 56:47:ff:f4:e9:72:20:9d:34:4c:81:9f:c1:f5:5c: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D3:E7:D3:14:3D:64:12:04:99:E8:1F:CB:E8:8B:8E:66:C0:6B:EE X509v3 Authority Key Identifier: keyid:66:DF:C8:9C:07:AE:13:31:BF:B3:71:38:56:8E:A7:9A:87:FE:CF:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt_InAeuEzG_s3E4Vo6nmof-zzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/035de6-ea5f-40a6-a673-19c9298ff5d5/1/Zt_InAeuEzG_s3E4Vo6nmof-zzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0f:0b:c5:ff:c3:8c:97:64:b6:5f:b2:4c:44:d8:b8:e9:d3: 94:17:8e:3a:ec:2a:ac:86:62:f9:d7:fe:bd:4d:0f:8f:d6:3f: 2d:f3:e3:f7:42:3a:5d:93:48:ec:93:87:6e:d0:12:fc:fc:1e: 32:dd:8d:dc:86:96:28:22:98:15:48:98:6c:56:a0:98:ca:ef: 0d:aa:68:24:35:e9:20:2c:2d:5e:07:86:66:66:fa:80:3b:62: 81:ca:36:5c:7e:b8:cd:d7:68:a3:e4:c3:fa:79:5a:6f:39:ac: 5e:50:d4:a2:c4:fa:e2:7b:4e:6a:87:5c:9f:72:d4:1d:50:3e: 67:08:46:ca:f4:aa:28:96:e6:d1:d1:b3:be:6d:b0:f8:3d:50: 00:2d:f2:e6:45:cb:dc:36:d0:0a:d2:1a:90:1a:c5:8f:eb:8a: 01:be:d2:2b:45:53:d4:04:11:ae:89:34:5c:b2:56:9f:dd:80: 64:44:ee:2e:b9:a3:05:45:5e:78:11:42:e6:10:73:d1:8a:c5: 17:b9:8c:ab:d8:cf:fc:a4:c7:f4:09:0f:c1:77:7c:53:02:da: e5:e9:bd:c0:60:2e:a4:b0:9f:be:02:34:38:59:10:9c:49:fc: 71:33:c2:d5:b8:55:82:48:ee:b8:78:6c:79:d2:e5:04:0b:fa: 24:24:98:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+NSrCiK0qxK2fwvrUUuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGZjODljMDdhZTEzMzFiZmIzNzEzODU2OGVhNzlhODdm ZWNmM2IwHhcNMjUxMjE3MTEwMTI2WhcNMjUxMjE4MTEwMTI2WjAzMTEwLwYDVQQD EyhiMmQzZTdkMzE0M2Q2NDEyMDQ5OWU4MWZjYmU4OGI4ZTY2YzA2YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpnY/nZeS/Px39iz/WHGLY9x7w6n BOKyTkDQiW4Nd5AlX3jw1ZR7RQzMyacubdjuQiNnMfPTvAUUXTytZ+VkyV1/TMOG I34Qvl3WOTbHV/QRRZv+saIbyk+CskLzGYERIx9rZ7Gs+CrhZM3xMy6qGDBBpMQT RplzVJfINAbq7aBpBEQ+tAdVIrUVxx969LdJzveXcd1Lyq8+i5gfkmEuW+SW4Xa/ XYqu8pG9UBjJouN133cqVX5VWJFOa61PkGuYK5F8U8gSZA02J2ZalRQqBKd3fyMz 6Sb3Gw9LEGEph0oZld2vzQfcExkp6q+nU8BWR//06XIgnTRMgZ/B9VxwrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLT59MUPWQSBJnoH8voi45mwGvuMB8GA1UdIwQY MBaAFGbfyJwHrhMxv7NxOFaOp5qH/s87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMt MTljOTI5OGZmNWQ1LzEvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wMzVkZTYtZWE1Zi00MGE2LWE2NzMtMTljOTI5OGZmNWQ1 LzEvWnRfSW5BZXVFekdfczNFNFZvNm5tb2YtenpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ8Lxf/D jJdktl+yTETYuOnTlBeOOuwqrIZi+df+vU0Pj9Y/LfPj90I6XZNI7JOHbtAS/Pwe Mt2N3IaWKCKYFUiYbFagmMrvDapoJDXpICwtXgeGZmb6gDtigco2XH64zddoo+TD +nlabzmsXlDUosT64ntOaodcn3LUHVA+ZwhGyvSqKJbm0dGzvm2w+D1QAC3y5kXL 3DbQCtIakBrFj+uKAb7SK0VT1AQRrok0XLJWn92AZETuLrmjBUVeeBFC5hBz0YrF F7mMq9jP/KTH9AkPwXd8UwLa5em9wGAupLCfvgI0OFkQnEn8cTPC1bhVgkjuuHhs edLlBAv6JCSYfg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:30:58 2025 by rpki-client